Data protection

Designation of the responsible body

The responsible body for data processing on this website and for the use of Microsoft Forms is:
Intellity GmbH
Wendelsteiner Str. 6
91126 Schwabach
The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).

Data Protection Officer

Our data protection officer is:
Mr Markus Bellmann
Wendelsteiner Str. 6
91162 Schwabach
Phone: +49 (9122) 633644
Email: [email protected]

Processing of personal data when using Microsoft Forms

Intellity GmbH uses Microsoft Forms for:

• Survey,
• Registrations for corporate events,
• Registrations to provide presentation materials (slides) for sessions held by our employees.
  The personal data processed include:
• Surnames and first names,
• Email address,
• Additional contact details if required for event registration or material provision.
  This information is stored in data centers of Microsoft Ireland Operations Limited within the European Economic Area (EEA). However, certain services may require data processing in the USA. We have concluded appropriate data protection agreements with Microsoft, including the EU standard contractual clauses, to ensure an adequate level of data protection.

Photos at events

At company events, photos and videos may be taken, which may also be published on social media and other platforms. This processing is based on Intellity GmbH's legitimate interest in the positive representation of the company in accordance with Art. 6 (1) (f) GDPR.

SSL or TLS encryption

Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.

Server log files

The website provider automatically collects and stores information in server log files that your browser sends to us. This data includes:

• Visited page on our domain,
• Date and time of the server request,
• Browser type and version,
• Operating system used,
• Referrer URL,
• Hostname of the accessing computer,
• IP address.
  This data will not be merged with other data sources. The basis for data processing is Art. 6 (1) (b) GDPR.

Cloudflare

We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 Para. 1 lit. f GDPR). A CDN is a network of [globally] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data can be processed in server log files by Cloudflare. Please compare the explanations under "Hosting". Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR not to operate a content delivery network ourselves. You have the right to object to the processing. Whether the objection is successful must be determined in the context of a balancing of interests. The processing of the data provided in this section is neither legally nor contractually required. The functionality of the website is not guaranteed without the processing. Your personal data will be stored by Cloudflare for as long as necessary for the purposes described. For more information on objection and removal options with Cloudflare, see: Cloudflare DPA Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities in which Cloudflare processes personal data of natural persons in the EU. These measures are based on the EU standard contractual clauses (SCCs). For more information, see: https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf

Whitepaper Downloads and Lead Generation

Intellity GmbH offers whitepapers for download on this website. The following personal data is collected to provide the download link:

Data collected:

• First name and last name
• Email address
• Marketing consent (optional)
• Privacy consent
• Timestamp of consent
• IP address (for fraud prevention)

Purpose of processing:

• Provision of the requested whitepaper via email
• Sending a time-limited download link
• With marketing consent: Information about similar offers and news

Legal basis:

• Art. 6 (1) (b) GDPR (Contract fulfillment – provision of the whitepaper)
• Art. 6 (1) (a) GDPR (Consent – for marketing approval)
• Art. 6 (1) (f) GDPR (Legitimate interest – fraud prevention)

Storage period:

• Data is stored for 3 years after the last contact.
• In case of withdrawal of consent, immediate deletion takes place.
• Download links are valid for a limited time (default 48 hours).

Right of withdrawal:
You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the withdrawal. To do so, send an email to [email protected].

Callback requests via the landing page helga.intellity.net

At helga.intellity.net we introduce Helga, our AI colleague. You can use the form on this page to request a callback.

Data collected:

• Name, company, phone number and email address
• Comment (optional)
• Confirmation that you have read the privacy notice
• Page language, time of the request
• Campaign information from the link you used (e.g. "flyer" or "LinkedIn"), if available

Purpose of processing: Handling your request and contacting you.

Legal basis:

• Art. 6(1)(b) GDPR (steps prior to entering into a contract, at your request)
• Art. 6(1)(f) GDPR (legitimate interest in preventing spam and abuse)

Processing and recipients: The landing page and our content management system are operated by Microsoft Ireland Operations Limited in data centres in the EU (West Europe region). Your request is stored there; the Intellity GmbH employees responsible for handling it are notified by email (Microsoft 365). Microsoft acts as our processor; the EU Standard Contractual Clauses apply to any processing outside the EEA.

Spam protection with Cloudflare Turnstile: To protect the form against automated requests, we use Cloudflare Turnstile provided by Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany. Turnstile is only loaded once you use the form. Your IP address and technical characteristics of your browser and device are transmitted to Cloudflare to verify that the request comes from a human. Turnstile does not set cookies for advertising or analytics purposes. The legal basis is Art. 6(1)(f) GDPR; access to information on your device is strictly necessary for the service you requested (Section 25(2) No. 2 TDDDG). For international data transfers by Cloudflare, see the section "Cloudflare".

No cookies, anonymous reach measurement: The landing page does not set cookies. We count page views, video starts and submitted requests with our own statistics tool on our server at Microsoft (Azure, EU) – without cookies and without reading characteristics of your browser or device. Your IP address is only stored in shortened form (the last two blocks are removed) and is at most used beforehand to determine your approximate location; it cannot be traced back to you. If "Do Not Track" is enabled in your browser, we do not count your visit. The data is not passed on to third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in evaluating our campaigns). The introduction video is only loaded when you actively start it; your IP address is then transmitted to our storage service at Microsoft (Azure, EU). To prevent mass requests, your IP address is briefly processed in memory but not stored.

Retention period: Requests are automatically deleted 180 days after receipt. If a business relationship results from your request, we store the necessary data within the scope of this relationship and the statutory retention periods.

Objection: You can object to the processing at any time and request the deletion of your request. To do so, please send an email to [email protected].

Rights of the data subjects

You have the right to information, correction, blocking and deletion of your personal data and the right to lodge a complaint with the responsible supervisory authority. You can revoke your consent to data processing at any time. The legality of the data processing carried out up to the time of revocation remains unaffected.

Right to lodge a complaint with the competent supervisory authority

In the event of a breach of data protection law, you have the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at: www.bfdi.bund.de